Windows 10: How to set up AppLocker restrictions on Windows 10 Pro?

I'm installing an office PC in a small business and I was wondering how do I enable AppLocker restrictions?

It seems like I've set them up in the gpedit.msc console, then started up AppIdentity service (set it to auto-run) but no matter what I do, the restrictions are not enabled, even though this site says that AppLocker is supported on Windows 10 Pro.

Any idea how to use that AppLocker on Win10?

PS. I want to white-list which software (executables) and what types of files can be opened on that machine.

:)

 

AppLocker Blocks Windows Store Apps Downloads

It's now March 2017, this problem is dragging on since August 2015. I've installed Windows 10 Pro in total 4 times on two machines because of this issue.

My conclusion is that some installer changes the working of AppLocker. But, Windows 10 Pro lacks the ability to change AppLocker settings (you cannot even switch on or off its identity service).

Interestingly, the many people here on 'answers'.microsoft.com trying to answer this question all come up with the same suggestions that do not work (in my case):

• wsreset.exe or run the troubleshooter for apps (https://support.microsoft.com/en-us...790db/run-the-troubleshooter-for-windows-apps)
• Adjust the settings of AppLocker in Local Security Policy (in secpol.msc). This obviously does not work because Windows 10 Pro is not supposed to have AppLocker at all. AppLocker is only available in Enterprise versions.
• Fiddle around with permission settings
• Create c:\Windows\AppReadiness
• Reinstall Windows 10 Pro

The Pro in Windows 10 Pro stands for Probably.: Probably you need to reinstall.

For Microsoft (if you want to do something):

a. The trouble shooter mentions a 'possible' problem with the Store cache. But is does not offer/is unable to do a repair

b. Doing a harddisk chkdsk could result in a blue screen of death and a subsequent repair of Windows (to a previous version).

c. Sometimes (at least in my current installed system), it is possible to add a new user to the system, but that user's settings are defected. That user cannot use the start-menu at all, looks like an even more serious problem there.

 

Applocker enforcement on Windows 10 Pro

As far as I understand, Applocker can be configured on Windows 10 Enterprise and Server 2012 R2. Would I be able to create a group policy on our 2012 R2 AD server and enforce applocker policies on Windows 10 Pro installations on the domain?

 

Applocker in Windows 10 Pro 1803: Does not seem to work

I read in Features removed or planned for replacement starting with Windows 10, version
1803 that Applocker was replacing Software Restriction Policies. I upgraded to 1803, and set up an initial Applocker configuration. I also edited the Registry so that the Application Identity Service would start automatically upon boot. Applocker, however,
does not appear to be working when I tried to launch various programs that should be blocked by Applocker. I noted in the Event Viewer Event 8008: appidsvc.dll: AppLocker component not available on this SKU, for each of the 4 times that I have rebooted the
PC

Three Questions:

1. Am I doing something incorrectly based upon what I shared, and if so, what is the fix?

2. Is there some other setup item that I need to do?

3. Is Applocker simply still non-functional in Windows 10 Pro 64-bit, even given Microsoft's announcement?

Thank you.